# For public access
---
apiVersion: v1
kind: Service
metadata:
  name: memelord-kkurval-app
spec:
  type: ClusterIP
  selector:
    app: memelord-kkurval-app
  ports:
    - name: http
      port: 80
      targetPort: 8000

# Warning: spec.privateKey.rotationPolicy: In cert-manager >= v1.18.0, the default value changed from `Never` to `Always`.
---
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  name: memelord-kkurval
spec:
  secretName: memelord-kkurval-tls
  dnsNames:
    - memelord-kkurval.ee-lte-1.codemowers.io
  issuerRef:
    name: letsencrypt
    kind: ClusterIssuer

---
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: memelord-kkurval
  annotations:
    traefik.ingress.kubernetes.io/router.entrypoints: websecure
spec:
  ingressClassName: traefik
  rules:
    - host: memelord-kkurval.ee-lte-1.codemowers.io
      http:
        paths:
          - pathType: Prefix
            path: "/"
            backend:
              service:
                name: memelord-kkurval-app
                port:
                  number: 80
  tls:
    - secretName: memelord-kkurval-tls